Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/fa3027e5-49ca-3475-88a5-10dd1aef72bd.roa
File: fa3027e5-49ca-3475-88a5-10dd1aef72bd.roa (raw, json)
Hash identifier: M8Mq4UzFa1H3mTfYBBj0kd8IXEr8WdonLUyTrQhOeDM=
Subject key identifier: 35:AA:B8:50:24:97:99:29:4D:F4:E5:E9:4C:CE:94:E6:C7:D3:7F:B1
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F432858467F4F6530D5566A0F15001D00
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/fa3027e5-49ca-3475-88a5-10dd1aef72bd.roa
Signing time: Thu 11 Jul 2024 01:00:26 +0000
ROA not before: Thu 11 Jul 2024 01:00:26 +0000
ROA not after: Wed 09 Oct 2024 01:00:26 +0000
asID: 18779
IP address blocks: 66.63.179.0/24 maxlen: 24
66.212.18.0/24 maxlen: 24
66.212.21.0/24 maxlen: 24
72.11.154.0/24 maxlen: 24
104.129.54.0/24 maxlen: 24
104.223.25.0/24 maxlen: 24
104.223.27.0/24 maxlen: 24
104.223.65.0/24 maxlen: 24
104.223.75.0/24 maxlen: 24
104.223.78.0/24 maxlen: 24
104.223.117.0/24 maxlen: 24
104.223.122.0/24 maxlen: 24
104.223.126.0/24 maxlen: 24
107.150.3.0/24 maxlen: 24
155.94.149.0/24 maxlen: 24
155.94.195.0/24 maxlen: 24
155.94.221.0/24 maxlen: 24
155.94.225.0/24 maxlen: 24
162.220.15.0/24 maxlen: 24
162.245.186.0/24 maxlen: 24
167.160.184.0/24 maxlen: 24
173.44.62.0/24 maxlen: 24
173.254.217.0/24 maxlen: 24
173.254.220.0/24 maxlen: 24
204.44.70.0/24 maxlen: 24
204.44.76.0/24 maxlen: 24
204.44.87.0/24 maxlen: 24
204.44.101.0/24 maxlen: 24
204.44.104.0/24 maxlen: 24
204.44.110.0/24 maxlen: 24
204.44.123.0/24 maxlen: 24
209.54.110.0/24 maxlen: 24
216.144.229.0/24 maxlen: 24
216.144.233.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:7f:4f:65:30:d5:56:6a:0f:15:00:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jul 11 01:00:26 2024 GMT
Not After : Oct 9 01:00:26 2024 GMT
Subject: CN=b4cac9ec-2110-417e-9a6c-b878ebc03e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:0a:d7:06:65:4f:d3:6d:89:51:1a:f6:fe:
93:60:92:5a:fe:17:f9:cc:c9:03:a8:64:a0:e2:39:
ab:1b:18:ea:1d:56:32:7b:03:cb:cf:a4:f4:87:39:
08:a3:d5:ab:ef:28:71:55:d1:57:c3:4a:4d:97:f9:
0e:24:e6:46:1d:fc:39:c6:64:ab:02:42:09:ff:cd:
ae:b4:5f:65:bd:ea:0e:d1:78:46:aa:40:01:a4:76:
a3:53:f2:b1:fd:44:6a:44:5a:8a:be:49:8d:13:4d:
c3:dd:38:19:b2:fb:08:0e:97:f0:76:b0:7c:43:ec:
15:a2:4d:9c:e9:d6:1f:34:8d:af:f5:91:58:d3:6c:
6d:9b:73:89:2d:ec:5c:1f:f7:fc:90:67:b3:04:64:
01:c5:a0:dd:2d:04:09:fc:23:4c:32:d6:2c:f8:f7:
a4:c0:11:00:0d:df:c1:4c:b3:f4:33:91:30:1c:3a:
03:27:53:00:d1:da:a9:a5:df:8d:51:1f:dc:18:5f:
fc:fd:2b:78:b0:9b:29:b0:44:b6:0c:40:f8:fe:14:
50:82:ee:08:e2:70:0a:74:af:38:83:5b:f8:4e:eb:
ad:32:8c:5a:3a:14:82:ac:1f:6d:d7:a0:06:00:09:
d4:d3:55:0f:12:01:aa:3f:c2:74:9e:19:38:3a:ed:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:B8:50:24:97:99:29:4D:F4:E5:E9:4C:CE:94:E6:C7:D3:7F:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/fa3027e5-49ca-3475-88a5-10dd1aef72bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
66.63.179.0/24
66.212.18.0/24
66.212.21.0/24
72.11.154.0/24
104.129.54.0/24
104.223.25.0/24
104.223.27.0/24
104.223.65.0/24
104.223.75.0/24
104.223.78.0/24
104.223.117.0/24
104.223.122.0/24
104.223.126.0/24
107.150.3.0/24
155.94.149.0/24
155.94.195.0/24
155.94.221.0/24
155.94.225.0/24
162.220.15.0/24
162.245.186.0/24
167.160.184.0/24
173.44.62.0/24
173.254.217.0/24
173.254.220.0/24
204.44.70.0/24
204.44.76.0/24
204.44.87.0/24
204.44.101.0/24
204.44.104.0/24
204.44.110.0/24
204.44.123.0/24
209.54.110.0/24
216.144.229.0/24
216.144.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:01:83:7f:29:a6:01:4f:e7:9b:f9:3d:40:82:a3:9e:b4:c7:
56:4b:bd:64:ff:9c:01:76:e3:84:24:ee:6d:05:e6:ac:91:a5:
d7:47:5c:d3:1e:ab:5b:9f:81:2f:98:30:dd:24:8c:b5:63:dc:
ce:07:c6:b2:70:01:41:1d:d7:5f:5c:90:e1:49:03:32:c2:84:
0e:93:25:b5:4d:80:52:c5:89:7a:7f:4a:1c:bc:37:da:82:95:
7a:7c:19:25:00:1a:03:1c:24:6b:2e:12:63:41:5d:c6:64:c6:
47:e7:98:00:4f:a4:78:67:40:ff:8d:95:39:85:15:cc:a3:17:
b0:da:21:ae:48:18:05:53:6d:7d:ce:90:3a:1e:a3:64:61:17:
6c:72:8c:b1:bd:64:e3:31:28:f6:de:31:ee:20:91:99:ff:de:
da:29:d6:b2:fb:52:dc:74:db:32:75:a3:0d:0a:46:bf:60:3d:
09:f9:1f:b8:e3:29:a5:ef:87:4d:9e:80:da:82:0e:5f:5b:e5:
9e:56:61:dd:f0:01:62:c6:da:a1:f6:e3:e8:96:7a:2a:f8:fa:
94:b0:f2:b0:40:ee:73:12:9d:85:89:89:3f:85:68:04:8a:53:
4b:8d:10:9d:76:2b:35:1e:01:3f:f4:a2:75:84:72:f5:0b:d0:
47:93:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org